General
-
Target
493110244ac9d551bbe6a9a8abc7ee0286f9acbf5588ce500fb46e37d67e7f0a
-
Size
521KB
-
Sample
210926-rnk3daehbk
-
MD5
b91985f749a949a26aac198b68a98bf1
-
SHA1
523a590c83d1941dd77fe6148dded3248c7d9d3a
-
SHA256
493110244ac9d551bbe6a9a8abc7ee0286f9acbf5588ce500fb46e37d67e7f0a
-
SHA512
d8071b45842f358d1d2a502d22e5321d22b40a16f165dba3eb233424bfd57855fb81940566b62cd86b91776fcae30e0f84fbd6eaa11ead7b54b561eeace2ef4f
Static task
static1
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
493110244ac9d551bbe6a9a8abc7ee0286f9acbf5588ce500fb46e37d67e7f0a
-
Size
521KB
-
MD5
b91985f749a949a26aac198b68a98bf1
-
SHA1
523a590c83d1941dd77fe6148dded3248c7d9d3a
-
SHA256
493110244ac9d551bbe6a9a8abc7ee0286f9acbf5588ce500fb46e37d67e7f0a
-
SHA512
d8071b45842f358d1d2a502d22e5321d22b40a16f165dba3eb233424bfd57855fb81940566b62cd86b91776fcae30e0f84fbd6eaa11ead7b54b561eeace2ef4f
-
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)
-
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-